9ff22a25d2c3456b2c0aee9b5151ab2d_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ff22a25d2c3456b2c0aee9b5151ab2d_JC.exe
Size

626KB
MD5

9ff22a25d2c3456b2c0aee9b5151ab2d
SHA1

53145bcb6a7331acfa2d140ab8794049ac0e5594
SHA256

00a03c102a5476c474cf4e457969ee4341d32d49eed64f0be4bb9024eaa7c1b5
SHA512

9b232183cad830879b97d94df6f91cdd76efee52dc017cfacbbdfe2ddb82037c99aab0e294e0fb842656e60fe81991945cc0e0f5858d73be52b3ba3dd5f7fb02
SSDEEP

12288:NpWFwpZBMtpr6p8F8KA1wD8y5zZtUD3zFTb9pwbinmNi+9BafLgw7dO/Y:2Fw94TF8zxyBU14NdQBROw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ff22a25d2c3456b2c0aee9b5151ab2d_JC.exe

Files

9ff22a25d2c3456b2c0aee9b5151ab2d_JC.exe
.exe windows:4 windows x86

d5c7bc1b806536f6a902e99753c18099

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlEncodeSystemPointer

kernel32

GetCurrentThreadId
FindNextVolumeW

shell32

SHChangeNotify

user32

GetCapture

Sections

.text
Size: 619KB - Virtual size: 620KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 281B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE